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^ ou know, having 

that Rabbit and 
Alice around has re- 
^ ally made things inter- 
esting lately. And, another old friend, 
Grace Slick of Jefferson Starship, took 
some time last week to stop by the 
Florida room to say hello to Alice, the 
inspiration for her song, "White Rab- 
bit," whom she hasn't seen in some 30 
years. It's hard to work with all the 
music in the air. 

Anyway, when thinking about this 
article, I came to a conclusion. Now 
that I've got a couple of Circuit Cellar 
Online articles behind me, it's obvious 
that I'm part of a powerful technical 
information outlet. I'm sure that if the 
Circuit Cellar columnists you follow 
every month in the 
print version were 
given unlimited 
article space, you'd 
probably be enjoying 



a magazine as thick as a phone book. 
Fortunately, the web site allows me 
and other authors to pnmde twice as 
much information each month. 

After receiving some beta PPP 
netwOTking code from Rablnt 
Semiconductor's network guru 
Charlie Krauter, it looks Hke the PPP 
haidwaie and all of the constructiw 
Stalls I promised last mcmth will 
appear online. 

LET'S GO TO THE HOP 

This is the last installment in the 
Rabbit series and, just as I moved the 
Seiko PPP IC and ISOModem to the 
web, I am moving the Rabbit 2000 
Core Module to print. Everything you 
need to make the Rabbit 2000 IC the 
star of your design is included on the 
Rabbit 2000 Core Module, and is de- 
signed to be plugged in. This elimi- 
nates having to design and lay out the 
microcontroller engine part of your 
project. Because it's my job to make 
your job easier. Photo 1 is a shot of 
the Rabbit 2000 Core Module holding 
court on its development board. 

Photo 2 shows that, in addition to 
the Rabbit 2000 Core Module, I've " 
assembled a little plug-in module of 
my own. It consists of two parts, a 
MAXIM 235 and a 1-pF tantalum 
capacitor. The MAX235 is an RS-232- 
to-TTL interface IC used to convert 
modem signal levels to TTL coming 
into the Rabbit 2000 Core Module and 
TTL-to-RS-232 signal levels going out. 
It's a standard implementation, as is 
seen in Figure 1. Because the name of 
the game is dialup and it doesn't have 




Photo 1—/ like this setup a 
little better than the Jackrab- 
bit The Core Module allows 
mete flexibility as to wliat you 
em dinOly connect to U. 




In true rabbit fash- 
ion, this project has 
resulted in quite a 
proliferation of ar- 
ticles. But Fred's 
got one last hop for 
the Rabbit dev 
board project. The 
jump to Internet 
connectivity was as 
simple as a twitch 
of the nose. 
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to be fast, I pulled an old U.S. Robotics 
28.8 external modem off the shelf foi 
this project. 

ONE HOP TO THE INTERNET 

To check out Circuit CeHar Online 
if you aren't using a cable modem or 
DSL, dial a phone number to connect 
to your ISP and open the window to 
the 'Net. If you use a dial-up modem 
for Internet access, most likely the 
protocol you use to establish contact 
with the ISP is PPP, or point-to-point 
protocol. I'll use the sani.e PPP rules 
that your desktop computer uses to 
get a phone to the Rabbit's ears a 
call through to the Internet. 

The mission this time is to get the 
Rabbit on the phone, and then on the 
Internet. After that, you can instruct 
it to send e-mail or serve HTML 
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pages. The problem is, there are no 
predefined Dynamic C PPP libraries or 
routines, but this setback was quickly 
eliminated with a single e-mail to 
Rabbit Semiconductor. It seems that 
Charlie was working on the PPP code 
as I was working on this article. 

PPP is taken for granted. But, PPP 
is an important step in the Internet 
access process. Like everything else in 
life, you don't appreciate it until you 
can't get it. With that, I'm going to 
delve into what makes PPP tick and 
some of the code necessary to hop 
around in the Internet. 

PPP 

A dial-up session to your ISP is 
defined as a point-to-point link (i.e., 
from your modem to a modem at the 
ISP location). When the physical mo- 
dem-to-modem session is established, 
you can't just pa^ packets to the 
interface in any way you choose. 
There has to be some standard of com- 
munications, an agreement between 
the sending and receiving parties. This 
normally involves the determination 
of which protocol will be used and the 



maximum size of the packets 
that will flow between the 
peers within the constraints of 
the selected protocol. 

The point-to-point protocol 
was designed to provide a stan- 
dard method for transporting 
multi-protocol datagrams over 
simple point-to-point links. A 
simple point-to-point link is 
usually a full duplex connec- 
tion that delivers packets in the 
order that they are transmitted. 
A datagram is the unit of trans- 
mission in the network layer 
(e.g., IP) and may be encapsu- 
lated in one or more packets before 
being passed down to the data link 
layer. 

PPP was designed for easy use and 
implementation. To make the concept 

of PPP 
clearer, you 
can break it 
down into 
three main 
compo- 
nents — 
encapsulation, 
a link control protocol (LCP), and a 
collection of network control (noto- 
cols (NCPs). 

A packet is the basic unit of encap- 
sulation. Packets are passed between 
the network layer and the data link 
layer. Because the data link layer is 
responsible for creating frames, a 
single packet or multiple packets are 
usually the cargo of frames. PPP uses 
a frame format and protocol similar to 
the HDLC 
(high-level 
data link con- 
trol) frame, 
which begins 
and ends with 
a flag or sync 
character 
QxTE. The 
combination 
of encapsula- 
tion coupled 
with framing 
allows differ- 
ent protocols 
to be trans- 
ported over a 
PPP link. 
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Figure ^— Them's nothing fancy or unknown here. This circuit 
has been iaad far ynrs. 



RABBIT IN A FIELD 

Figure 2 shows that a standard PPP 
frame consists of six fields. Let's exam- 
ine them left to right. I've already 
mentioned the flag field, a single byte 
that sits at the beginning and end of a 
frame. If you're wondering what would 
happen if your data contained a OxTE, 
not to worry. PPP has the capabihty to 
escape such characters. In fact, PPP 
escapes characters less than 0x20. Has 
escape process involves exclusive 
ORing the control code with 0x20. For . 
instance, to send Ox7E as data, OxTE 
would be exclusive ORed with 0x20, 
yielding Ox5E. Then the escape charac- 
ter OxTD is inserted before the Ox5E, 
resulting in a two-byte sequence of 
Ox7D and Ox5E, representing the data 
value of Ox7E. At this point, the receiv- 
ing madiine simply does another ex- 
clusive or with 0x20 against the Ox5E 
and discards the Ox7D escape character 
to return the original value of Ox7E. 
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VPP has no mediod for 

assigning individual station 
addresses. So, the Address 
field is a standard broadcast 
address of OxFF. PPP is 
connectionless (i.e., it doesn't 
require a formal session with 
sequenced frames). The 0x03 
in the Control field specifies 
this as it represents the trans- 
mission of data using an un- 
sequenced frame. If you were 
to dig out the bit scheme, 
you'd find that the 0x03 is the 
unnumbered information. (UI) 
command with the poll/final 
(P/F) bit set to zero. 

Knowing what's in the 
information field of a PPP 
frame is important. The two 
bytes of the protocol field 
identify the protocol that's 
encapsulated in the informa- 
tion field. Table 1 states some 
of what you can put into the 
protocol field and what the 
values represent with the 
protocol. All values are in 
hexadecimal. 

The Data, or information field, is 
interesting because it can be zero 
bytes in length. The default maxi- 
mum length of this field is 1500 bytes 
(this is negotiable). The Data field can 
also be padded. An easy way to find 
the end of the Data field is to find the 
flag at the end of the frame and count 
back past the two PCS bytes in the 
Frame Check Sequence field. 

Usually, where you find fields that 
comprise a frame, you find a protocol 
that goes with them. LCP is the PPP 
method of estabUshing, configuring, 
maintaining, and terminating the 
point-to-point connection. LCP pack- 
ets are akin to marines because they 
are the first to fight. Each peer partici- 
pating in a PPP link sends LCP pack- 
ets to configure and test the data link 
before establishing communications 
over the PPP link. You can be authen- 
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ticated only after the link is deemed 
satisfactory. So, authentication com- 
prises supplying the log-on user ID and 
password to the remote peer. 

After the physical link is made, 
PPP then sends NCP packets to 
choose and configure one or more 
network-layer protocols. After each 
desired network-layer protocol has 
been configured, datagrams from these 
protocols can be exchanged between 
the peers on the link. The link con- 
figuration will exist until LCP ot NCP 
packets close it down or an operator 
or predefined timer stops the link. 

PHASES 

To better understand LCP, you can 
divide its fimctionality into four 
phases. As I stated earlier, the first 
operation is physical link estabhsh- 
meat. In Figiure 3, link dead is the 
starting and ending point of the phase 
relationships. The modem is com- 
manded to dial and subsequently 
contacts the answering modem. 
Carrier detect from the modem on 
your end signals the LCP that the 
physical link is active ^id 
to be used. 



The UP signal from the - 
physical layer puts the LCP 
process in the link establish- 
ment phase. Before any 
datagrams can be exchanged 
over the newly opened link, 
LCP ap&as ^e comiection 
and negotiates configuration 
parameters. This phase is 
complete when a configura- 
tion-acknowledgment frame 
(Configure-Ack) has been 
both sent and recdved. All of 
the configuration options are 
assiuned as defaidts until 
altered by the negotiaticm 
process. These configuratirai 
options are not protocol- 
dependent. The NCP handles 
any protocol-dependent con- 
figuration issues in the net- 
work-layer protocol phase. 

If necessary, you are au- 
thenticated before any net- 
work-layer protocol 
datagrams are exchanged 
between the peers on the 
point-to-point link. PPP sup- 
ports two authentication protocols. 
Password authentication protocol 
(PAP), a simple method of estabUsh- 
ing user identity, is the most popular. 
Following the establishment of the 
PPP link, the user ID and password 
are sent to the remote peer until the 
authentication is positively acknowl- 
edged or the link is broken. With PAP, 
everything is sent in the clear with no 
encryption. This leaves the remote 
peer in charge of determining how to 
affect some sort of log-on security. 
The second authentication protocol is 
challenge handshake authentication 
protocol (OiAP). This mediod sends a 
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challenge message to the remote peer, 
which responds with a calculated 
value. If the sender agrees with llie 
returned value, the authentication is 
positively acknowledged. Because this 
calculated value is always unique, 
CHAP obviously offers a higher level 
of log-on security than PAP. That's all 
good, but by default, authmtication is 
not necessary. 

After the link is (q>ened and the user 
or peer is authenticated, network-layer 
protocol configuration negotiation 
occurs. Each desired network-layer 
protocol (IP, IPX, etc.) is configured 
s^>afately by the apprcqsiate NCP. As 



long as the PPP link is up to this point, 
each individual protocol can be 
brought up and taken down at any time 
by its controlling NCP. If LCP closes 
the link, the network-layer protocols 
are alerted so that they caa take ^qno- 
priate action. 

LCP can terminate the link at any 
time. Normally, this is planned and 
executed by you or the administrator. 
Other physical events, such as the 
expifation of an idle-period timer can 
also terminate the link. 

Each LCP phase employs a particu- 
lar frame. Link-establishment frames 
consisting of link configuration pack- 



ets (Configure-Request, Configure- Ack, 
Configure-Nak and Configiure-Reject) 
are used to establish and configure a 
link. Link-termination frames contain- 
ing link termination packets (Termi- 
nate-Request and Terminate- Ack) are 
used to terminate a link, and link- 
maintenance frames filled with link 
maintenance packets (Code-Reject, 
Protocol-Reject, Echo-Request, Echo- 
Reply, and Discard-Request) are used 
to manage and debug a link. 

Table 2 is the format of an LCP 
packet. The Code field denotes the 
t^^ of LCP packet. For instance, 0x01 
in the Code field shows that the LCP 
packet is a Configure-Request packet. 
A list of the Code field entries is 
shown in Table 3. 

The Identifier field is used to 
match requests and replies to the 
peers. If this field is invalid, the 
packet is ignored without any action 
springing from its contents. 

The Length field includes the Code, 
Identifier, Length, and Data field byte 
counts. Everything outside the limits 
defined by the Length field entry is 
treated as padding and thrown away. 

The Data field contents are directly 
dependent on the Length field byte 
count. Also, the format of the Data 
field is controlled by the type of 
packet defined in the Code field. Typi- 
cally, the Data field format follows 
the Type/Length/Data layout. A list of 
LCP option type field entries is shown 
m Table 4. 

As all of these various types of 
frames are flying among peers, com- 
mands to configure and send the afore- 
mentioned packets and frames are 
issued depending on the conditions at a 
particular point in the execution of a 
phase. These packet-assemble and 
packet-send commands are generated 
by events, actions, and state transi- 
tions. This collection of events, ac- 
tions, and state transitions (as they 
relate to PPP) are known as the option 
negotiation automaton. 

Without going into lengthy discus- 
sion, the option negotiation automa- 
ton is a definition and model of how 
the states and state transitions must be 
made to follow the rules in imple- 
menting PPP. PPP code is written 
using the option negotiation automa- 
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05 F4 


Sent LCP Reject 
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Figure 3— I'm glad it doesn't use "dead' for low and "alive' for 
high in Vh logk^ stnst. 



ton as the flowchart. Now that you're 
dangerous, let's look at a piece of PPP 
protocol and break down the fields to 
detamine what w^t right and what 
w^t wzcmg in Listing 1. 

BREAKING IT DOWN 

Listing 2 is a code snippet that runs 
to produce the AT and ATZ modem 
commands. In terms of phase, you are 
at dead here. The modem initializes 
and the ISP is dialed. When the carrier 
detect is sensed, the establish phase is 
entered. In the meantime, the ISP asks 
for a login and password. This is not a 
PPP function. The Rabbit 2000 Core 
Module is assigned an IP address and 
given the MTU size. 

The next line is where the real PPP 
fun begins. Let's break down the trace. 
The Ox7E is really there on the 
datascope, but the debug code in the 
Rabbit library doesn't display it. So 
far, everything is just as it should be. 
The flag byte is followed by OxFF in 
the Address field and 0x03 represents 
un-sequenccd frame transmission in 
the Control field. 

The next two octets (there's 
Mozart again) define the protocol 
encapsulated in the packet. 0xC021 is 
the assigned number for LCP. The 
following fields are Data fields for- 
matted according to the protocol 
called out in the protocol field 
(0xC021). Another look at Table 2 
shows that, for an LCP packet, you 
should expect a single-byte Code tield. 
This Code field is populated with 
0x0 1. This is a Configure-Request 
packet. The next byte is the Identifier, 
which, in this case, is 0x08 followed 
by the two-octet Length field contain- 
ing 0x0018. This trace doesn't show 
all of the bytes between flags, but I 
verified on the datascope that there 



in from the end flag). 

The next byte is 
the LCP Configura- 
tion Options Type 
field. The 0x01 
shows that this is an 
MRU setting. The 
length of this MRU 
segment is 0x04 octets and the value of 
the MRU (maximum receive unit) is 
OxOSDC, or 1500 decimal. Again, fol- 
lowing the Type/Length/Data layout 
and beginning with the next byte, 
0x02, the async control character map 
is being negotiated and you're asking 
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for no escaped characters with the four 
octets of zeroes. The 0x05 and 0x06 
bytes that follow are the beginning of 
sending what is called the magic num- 
ber. The magic number is an arbitrary 
number derived from any means that is 
as random as possible. The idea is to 



Listing 2— I'm really showing you this so you can hool( up your Rabbit 2000 Core Module to a modem. 

/******************* 
external .lib 

A set of routines for controlling an external modem through a 
full RS232 link. 

Default hardware is a core module using 
Pin assignments for control lines are: 



serial port C 



DTR 


- PB6 


(out) 


RTS 


- PB7 


(out) 


CTS 


- PBO 


(in) 


DCD 


- PB2 


(in) 


RI 


- PB3 


(in) 


DSR 


- PB4 


(in) 


TD - 


PC2 


(out) 


RD - 


PC3 


(In) 



/*** BeginHeader */ 
//#ifndef _DCSPPP_LIB 
//#define _DCSPPP_LIB 
#ifndef _EXTMODEM_LIB 
#define _EXTMODEM_LIB 



unsigned 
//current 

//setup 
#d e f i n e 
#d e f i n e 
#def 1 ne 
#define 
#def ine 



long extmodem_baudrate ; 
baud rate for communication 



with modem 



flow control for port C 
SERC_RTS_PORT PBOR 
SERC_RTS_SHADOW PBDRShadow 
SERC_RTS_BIT 7 
SERC_CTS_PORT PBDR 
SERC_CTS_BIT 



I* 



EndHeader 



/*** BeginHeader ModemOpen */ 

int ModemOpen( unsigned long baud); 

/*** EndHeader */ 



START FUNCTION 



DESCRIPTION 



t + * * + ^ 



(continued) 



52 taMi^ Jtiiiitiy 200l 



ORGUITCaLAR* 



iM«w.circuitcellar.eom 



IT 



Listing 2-continued 



ModemOpen 

<EXTERNAL_MODEM.LIB> 

SYNTAX : 
baud ) ; 



int ModfiwOpenCunsigned long 



DESCRIPTION: Starts up coranuni cation with an external modm 

PARAMETER!: The baud rate for iMMWilcating with the 

modem 

RETURN VALUE: 1 - External modem detected 

- not cannecte«l to external mo<lern 
END DESCRIPTION 

**************************************** 

int MedsmOfeflCuftsifned long baud) 
{ 

extraodem_baudrate = baud; 
//check DSR line 
If (ModemReadyC )) 
{ 

serCopen(baud) ; 
serCflowcontrolOnC); 
return 1; 

} 



else 
{ 



return 0; 



} 



/*** BeginHeader Modemlnlt */ 
int ModemlnitO; 
/♦** EndHeader */ 

/* START FUNCTION DESCRIPTION 
******************************************** 

M d e m I n i t 

<EXTERNAL_MODEM. LIB> 

SYNTAX: int ModemlnitO; 

DESCRIPTION: resets modem with AT, ATZ commands 
RETURN VALUE: 1 - suectss 

- modem not responding 

END DESCRIPTION 

** *****************************************************jHt* y 

int ModemlnitC) 
{ 

int i : 



for( i 
{ 



} 

return 8; 



= 0;i < 3;i++) 

ModemSend( "AT\r" ) ; 

if (ModemExpectC "OK" , 20O0) ) 

{ 

ModemSend("ATZ\r"): 

i f (ModemExpectC "OK" , 20t0) ) 

{ 

return 1; 

} 

} 



send this and see what you get back. If 
your magic number is retumed to you, 
then you are in a loop-back mode. On 
the other hand, if you get a totally 
different number than what you con- 
cocted and sent out, that probably 
means the link is ready for use. If the 
magic number is not negotiated, it 
consists of four octets of zeroes. 

The next line after "Got LCP Re- 
quest" is incoming from the peer at 
my ISP. Notice the differences in the 
MRU and async control character 
map entries. The Rabbit rejects the 
Configure-Request with a 0x04 (Con- 
figure-Reject) in the Code field. The 
ISP peer then says OK and s^ds a 
Configure-Ack with settings you can 
agree on. At this point, you should be 
OK with the negotiated values on 
your end, so you send a positive 
acknowledgement to the ISP peer. 
The PPP link is established. 

OUT OF PAPER 

The Circuit Cellai editorial staff 
has one of those long hooks they used 
to use to pull performers off stage. 
Hiat means I'm out of paper, but I'm 
not done with dialup and PPP. I'll 
cover the next two phases, authenti- 
cate and network, next month. Until 
then, remember, it doesn't have to be 
complicated to be embedded. Bl 

Author's Note: I would like to thank 
Tamara Kaestner and Charlie Krauter 
for sharing their wetdth of Rabbit 
knowledge. 



Fred Eady has more than 20 years of 
experience as a systems engineer. He 
has worked with computers and 
communication systems large and 
small, simple and complex. His forte 
is embedded-systems design and 
communications. Fred may be 
reached at fied@edtp.com. 
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